Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/rL58Kqsxeaqru5D00WdYd-TnrMQ.roa
File: rL58Kqsxeaqru5D00WdYd-TnrMQ.roa (raw, json)
Hash identifier: kdnklHSIh7ZzZl6IrslilopZnwui+78yS+VFo6oBxBE=
Subject key identifier: AC:BE:7C:2A:AB:31:79:AA:AB:BB:90:F4:D1:67:58:77:E4:E7:AC:C4
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 0183AD1B072DD5D4E60B309AA53C09A9EA32
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/rL58Kqsxeaqru5D00WdYd-TnrMQ.roa
Signing time: Thu 06 Oct 2022 11:42:53 +0000
ROA not before: Thu 06 Oct 2022 11:42:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 145.219.64.0/18 maxlen: 18
145.219.0.0/21 maxlen: 21
145.219.18.0/23 maxlen: 23
145.219.20.0/22 maxlen: 22
145.219.128.0/17 maxlen: 17
145.219.24.0/21 maxlen: 21
145.219.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:1b:07:2d:d5:d4:e6:0b:30:9a:a5:3c:09:a9:ea:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Oct 6 11:42:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acbe7c2aab3179aaabbb90f4d1675877e4e7acc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c7:5b:c8:a0:68:da:83:6e:86:71:10:89:62:
f7:55:8e:ec:a2:0c:3e:11:40:21:c8:90:92:0e:a0:
49:7a:13:d4:09:72:93:90:05:50:8f:8e:a0:5b:44:
01:d9:e9:84:e8:4f:80:a0:0a:50:ba:a4:1c:62:a0:
b0:3c:f4:ac:79:33:4b:79:e7:0e:e7:c3:d2:cf:1c:
4c:59:cb:c6:4a:1f:2a:a6:8b:06:fb:3f:b1:1e:fe:
02:0f:f7:6d:2b:cc:3a:02:13:5c:98:43:10:a2:aa:
a1:6b:f7:94:a3:2a:93:1e:34:f6:19:cb:8f:ea:fb:
06:9a:b0:3a:25:14:48:a4:6c:0d:97:18:ed:21:f1:
64:67:44:72:e1:33:1a:61:b0:eb:d0:b9:a3:ba:0d:
9d:dc:d1:7c:12:33:c6:a6:5a:f7:50:19:26:1e:d2:
c0:d0:a1:65:e5:bf:31:1c:68:2d:2b:0c:ad:08:a9:
b7:7a:86:91:ad:d3:95:6e:59:b5:15:52:37:a0:a5:
21:70:46:b5:6b:67:e7:05:e9:2b:2a:20:81:39:56:
0e:63:30:87:32:09:93:62:bb:ae:08:f4:32:d0:c5:
dc:be:cb:89:5b:12:45:dd:8c:c4:de:06:68:7c:55:
e0:71:59:52:3b:c3:e6:bf:94:af:71:d7:b6:9a:02:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:7C:2A:AB:31:79:AA:AB:BB:90:F4:D1:67:58:77:E4:E7:AC:C4
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/rL58Kqsxeaqru5D00WdYd-TnrMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.0.0/21
145.219.18.0-145.219.255.255
Signature Algorithm: sha256WithRSAEncryption
9b:7c:9d:06:8e:5d:c6:5b:e5:72:f7:14:b4:5b:a0:82:07:a5:
0b:81:33:f6:b0:ad:a0:92:4c:b5:eb:40:df:14:32:93:40:19:
51:c4:94:97:a1:b8:4e:f1:1e:0d:9a:09:ad:7b:b5:34:5e:85:
f5:45:58:68:38:8b:dc:21:19:97:5e:ed:c9:5b:9b:88:56:1d:
10:de:c3:ab:10:98:4e:5f:a3:6d:d6:d5:6a:db:a8:83:26:a4:
31:ba:16:a4:47:20:99:66:f6:b5:80:87:c6:75:3e:34:51:c7:
88:70:0c:2f:5f:ab:aa:de:f6:14:9b:2a:2b:24:49:77:cd:92:
34:33:ac:00:6a:01:4c:3e:9c:2f:02:40:c2:3c:6a:54:5d:1e:
b0:ca:14:5c:98:f4:c7:ed:6b:ed:ac:8e:76:5e:e9:c6:22:e5:
48:b4:71:9d:64:6e:f6:a7:c9:37:a2:3d:31:0d:d4:88:21:82:
fb:e0:0d:1f:88:78:b1:9e:c1:bf:5c:b1:4c:be:4b:2f:a6:3e:
e4:66:c8:87:36:15:a9:0a:81:30:35:7e:ad:a3:28:b1:ff:e1:
3c:a3:aa:da:08:a4:24:b8:03:c7:f5:58:7e:dc:d4:d2:88:2b:
56:8a:b5:b2:a7:f6:9e:0c:48:92:ef:65:f7:bd:1a:45:b4:63:
c2:95:75:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:32 2023 by rpki-client on console-ams.rpki-client.org